MULTI-RINGED INTERNET CO-LOCATION FACILITY SECURITY SYSTEM AND 

METHOD 

FIELD OF THE INVENTION 

[0001] The present invention relates generally to the field of security systems and, more 
particularly, to a multi-ringed Internet co-location facility security system and method. 

BACKGROUND 

[0002] The growing use of the Internet by businesses around the globe is creating a need 
for a scalable and secure home for every organization with a mission critical Internet 
component. Various facilities exist to provide Internet Service Providers (ISPs), Application 
Sen/ice Providers (ASPs), and content providers with a safe place to house their hardware. 
[0003] In a typical co-location model, member sites are placed in an environment where 
they have access to a network provider, site management and web hosting arrangements, 
and other similar types of services. While co-location moaeis expedite electronic 
transmissions, the clustering of member sites in these facilities makes them vulnerable to 
vandals, thieves, and even terrorist attacks. Because modern e-commerce companies 
moving billions of dollars over the Internet can not afford to jeopardize the physical security 
of their equipment, co-location facilities are generally protected by advanced security 
systems. For instance, video cameras record activity in and around the facilities, sensors, 
including motion and sound sensors, detect suspicious or uncharacteristic events, and 
computers located in security control centers monitor access points. These systems may 
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also include magnetic card readers or similar electromagnetic locking devices granting 
member users access to certain parts of the facilities or to individually locked cages 
configured for networking and/or server co-iocaticn. 

[0004] Unfortunately, in the security conscious world of the Internet, the security systems 
of the prior art have many limitations. For one, they do not provide co-located members 
with enough control. Although these systems are designed to track everyone in a 
co-location facility at all times, members do not have access to this information. Keeping 
this information private may work in hospitals or jails, for example, but it does not provide 
enough leverage to e-commerce companies whose businesses depend on the facility in 
which their equipment is placed being absolutely free from interruption of service (power, 
air conditioning, the interconnections themselves, etc.). In addition, under current 
co-location security systems, members are unable to schedule visitor access to the facility 
through a user Interface connected to the World Wide Web. This lack of automated access 
poses an additional security risk because it allows security officers, rather than the 
members themselves, to have too much control regarding visitor access to co-located 
member sites in the facility. Moreoever, the security systems of the prior art are not 
completely integrated. Tracking information from all the various components of the system 
is not available on a centralized database accessible by co-located members. Finally, 
visitors to one co-location facility do not have access to other co-location facilities owned by 
the same organization without having to go through a lengthy visitor enrollment system 
which is both burdensome and costly in the fast-paced world of e-commerce. 
[0005] Therefore, there is a need for an Internet exchange security system and method 
that is both completely Integrated and that is also able to be monitored and access 



4 



controlled by co-located members of the facility. There is also a need for a more efficient 
co-location facility visitor access and enrollment system. 
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SUMMARY OF THE iNVENTION 

[0006] It is an object of the present invention to provide a multi-ringed security system and 
method for an Internet co-location taciiity that integraies aii the majur coriiponents of the 
system and that makes the tracking information from these components available to 
co-located members on a master database accessible from the web. It is a further object of 
the present invention to provide a web-based interface that allows co-located members to 
assign visitor access to the Internet co-location facility from remote locations anywhere in 
the world. It is still a further object of the present invention to provide a visitor access and 
enrollment system that allows the visitor to enroll only once on the system to be granted 
access to one or more other Internet co-location facilities around the globe. 
[0007] According to one aspect of the present invention, there is provided a security 
system to control, monitor, and track security integrity and events within an Internet 
co-location facility. The security system may be installed at the Internet co-location facility 
and linked to a corporate server through a Wide Area Network (WAN). In the preferred 
embodiment of the present invention, a co-located member schedules a visit to the Internet 
co-location facility from a computer terminal located at a remote site ubiny a web-based 
Customer Care System (CCS). Contact information, visit information, and the like is 
entered by the co-located member through the web-based interface and is transmitted by 
the CCS via the Internet to a Customer Support and Customer Relationship Management 
(CRM) system located on the corporate server that stores and manages this information in 
a database. The CCS also assigns a visit identification number for the scheduled visit and 
transmits this information to the CRM as well. The CRM opens a file in the database which 
stores the information about the co-located member and the nature of the scheduled visit. 
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[0008] When the visitor arrives at the Internet co-location facility, one of two procedures 
may be followed. If the visitor is already enrolled at the Internet co-location facility, the 
visitor may use a Diometrics hand reader and input ihe visitur identification code into a i-^ey 
pad or similar type of alphanumeric input device coupled to the biometrics hand reader. If 
the biometrics hand reader verifies that the hand profile and visitor identification code 
match a profile for a visitor enrolled at the Internet co-location facility, an access control 
system connected by a private security network to the front entrance biometrics hand 
reader allows the visitor to enter the Internet co-location facility. If there is no match, 
access is denied. 

[0009] The use of the front entrance biometrics hand reader also triggers a software 
action in a Customer Security System (referred to as the Equinix Security System (ESS)) 
which includes a central processing unit (CPU) connected by the private security network to 
the access control system and to the lobby workstation. The ESS provides the lobby 
workstation (which may be monitored by a security officer) with picture and identification 
information for the visitor, a list of open and scheduled cases associated with the visitor, 
and specific security levels for the visitor. The visitor may then use a plurality of biometrics 
hand readers and input the visitor identification code into the key pad or similar type of 
alphanumeric input device coupled to each of the plurality of biometrics hand readers to 
move throughout the Internet co-location facility to an appropriate cage where the 
co-located member's Internet access unit and other equipment may be housed. After the 
visitor performs work or some other type of function in the cage, the visitor returns to the 
lobby using the plurality of biometrics hand readers. 
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[0010] If the visitor is not already enrolled at the Internet co-location facility another aspect 
of the present invention allows for a visitor access and enrollment procedure. According to 
this aspect ot the present invention, visiter identification inrormation (I.e., nand profiles for 
the plurality of biometrics hand readers, photo identification for the access control system, 
and additional identification information) is gathered by an enrollment biometrics hand 
reader and the access control system and is transmitted to the plurality of biometrics hand 
readers, the ESS, and to the CRM database which is located on the corporate server 
coupled to the Internet co-location facility through the WAN. The visitor identification 
information may then be transmitted to the ESS and to a plurality of biometrics hand 
readers and access control systems at one or more other Internet co-location facilities 
through the WAN. In this manner, the visitor need only enroll once in the Internet 
co-location facility security system to be granted access to any other Internet co-location 
facility around the globe. 

[001 1 1 In a further aspect of the present invention, the events of the visit may be 
monitored by co-located members of the Internet co-location facility. The access control 
system tracks the visitor's use ot the plurality of biometrics hand readers and transmits this 
information to the ESS. The ESS, in turn, transmits the information to the CRM which 
makes the information available in almost real-time to co-located members through the 
CCS web-based interface. In this way, co-located members may monitor the visitor's 
location within the Internet co-location facility at all times. 
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BRIEF DESCRIPTION OF THE DRAWINGS 

[0012] The present invention is illustrated by way of example, and not limitation, in tlie 
figures of the accompanying drawings in which like reference numerals refer to similar 
elements and which: 

[0013] Figure 1 is a functional block diagram illustrating the overall operation of an 
Internet co-location facility security system in accordance with one embodiment of the 
present invention. 

[0014] Figure 2 is a functional block diagram illustrating the network detail of the access 
and enrollment components of an Internet co-location facility security system in accordance 
with one embodiment of the present invention. 

[0015] Figure 3 is a functional block diagram illustrating the design layout of the primary 
access points in an Internet co-location facility security system in accordance with one 
embodiment of the present invention. 

[0016] Figure 3A is a functional block diagram illustrating multiple security rings 
representing the primary access points in the design layout of the Internet co-location 
facility of Figure 3. 

[0017] Figure 4 is a sample Visit-in-Progress computer user interface screen that 
co-located members may download from a CCS web-based interface component of an 
Internet co-location facility security system in accordance with one embodiment of the 
present invention, 

[0018] Figure 5 is a sample Case Assignment computer user interface screen as it 
appears on a lobby workstation of an Internet co-location facility security system in 
accordance with one embodiment of the present invention. 
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[0019] Figure 6 is a sample Visit-in-Progress computer screen that is maintained in a 
database of an Internet co-location facility security system in accordance with one 
embodiment of the present invention. 

[0020] Figure 7 Is a sample Start Visit computer user interface screen as it appears on a 
lobby workstation of an Internet co-location facility security system in accordance with one 
embodiment of the present invention. 

[0021] Figure 8 is a flow diagram illustrating the process by which a co-located member 
may schedule a visit to an Internet co-location facility using an Internet connection to a 
database located on a server of an Internet co-location facility security system in 
accordance with one embodiment of the present invention. 

[0022] Figure 9 is a flow diagram illustrating the process by which an enrolled visitor is 
granted access to an Internet co-location facility using a front entrance biometrics reader of 
an Internet co-location facility security system In accordance with one embodiment of the 
present invention. 

[0023] Figure 9A is a flow diagram illustrating the process by which a visitor may be 
enrolled m an Internet co-location facility security system using an enrollment biomeincs 
reader connected to the access control system and to the plurality of biometrics readers in 
accordance with one embodiment of the present Invention. 
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DETAILED DESCRIPTION 

[0024] Throughout the following description specific details are set forth in order to 
provide a more thorough understanding of tne inveniicn. However, the invention may be 
practiced without these particulars. In other instances, well known eiennents have not been 
shown or described in detail to avoid unnecessarily obscuring the present invention. 
Accordingly, the specification and drawings are to be regarded in an illustrative, rather than 
a restrictive, sense. 

[0025] Referring now to Figure 1 , there is shown a functional block diagram illustrating the 
overall operation of an Internet co-location facility security system 100 in accordance with 
one embodiment of the present invention. The Internet co-location facility 110 Itself may 
include a facility comprising a plurality of cabinets located in shared or private cages 
(not shown in this view). Each cabinet is an enclosed frame or cage into which equipment 
may be mounted. The cabinets may be configured in full spaces (for example 36" deep by 
22" wide by 83" tall) and are designed so that co-located members of the Internet 
co-location facility 110 may house Internet access units and other types of equipment (not 
shown in this view). A plurality of network proviaers (noi shown in this view) may be 
connected to the co-located member's equipment. It should be noted, however, that the 
Internet co-location facility security system 100 of the present invention may be used in 
numerous types of co-location models and other types of facilities with high-level security 
system requirements. 

[0026] The Internet co-location facility security system 1 00 may be installed at the Internet 
co-location facility 1 10 and linked to a corporate server 125 through a Wide Area Network 
(WAN) 115. In the preferred embodiment of the present invention, a co-located member 
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may use a remote computer terminal 130 to schedule a visit to tlie co-located member's 
cage within the Internet co-location facility 110. Using a web-based Customer Care 
System (CCS) accessible from the remote computer terminal 130, the co-iocated member 
may schedule the visit by entering information into the CCS regarding the date, time, 
duration, and nature of the visit, etc. See also Figure 8 (processing block 805). The visit 
information is then transmitted via the Internet 135 to a Customer Support and Customer 
Relationship Management System (CRM) 120 located on the corporate server 125 
connected by the WAN 1 15 to the Internet co-location facility 110 (processing block 810). 
The CRM 120 includes a database to store and manage the visit information in a file 
particular to the co-located member who scheduled the visit (processing block 81 5). 
However, it should be noted that while the file that is opened by the CRM 120 is particular 
to the co-located member who scheduled the visit, any visitor who is authorized to access 
the Internet co-location facility 1 10 by the co-located member and by the Internet 
co-location facility security system 100 may make the scheduled visit. Every scheduled 
visit may be referred to as a case in the Internet co-location facility security system 1 00 and 
appears as a case assignment in the CRM 120 database indicating information such as a 
visit identification number for the visit, expected visitor name, co-located member name, 
date, time, duration, and nature of the visit, etc. The CRM 120 transmits the case 
assignment through the WAN 1 15 to the Customer Security System (referred to as the 
Equinix Security System (ESS)) 170 which includes a central processing unit (CPU) to 
store the case assignment. 
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[0027] When the visitor arrives at the Internet co-location facility 1 1 0 for the scheduled 
visit, one of two procedures may be followed depending upon the visitor's enrollment status 
at the internei co-location facility nO. If the visitor is aiready enrolled at The Internet 
co-location facility 110 (i.e., if the visitor has visited the Internet co-location facility 1 1 0 or 
another Intemet co-location facility 140, 145, 150, etc., at least once), the visitor may use a 
conventional biometrics hand reader (not shown in this view) controlled by software 195 
and enter a visitor identification code particular to the visitor into a key pad or similar type of 
alphanumeric input device coupled to the front entrance biometrics hand reader. See also 
Figure 9 (processing block 905). It should be noted that every time the visitor uses one of 
the plurality of biometrics hand readers 190 located in the Internet co-location facility 110, 
the visitor must also enter the visitor identification code into a key pad or similar type of 
alphanumeric Input device coupled to each of the plurality of biometrics hand readers 190. 
It should also be noted that although biometrics hand readers are used in the preferred 
embodiment of the present invention, other types of conventional personal characteristics 
scanners may be used as well including knuckleprint, fingerprint, and retinal scanners. 
Other types of electronic locking devices may aiso be used. 

[0028] If the front entrance biometrics hand reader verifies that the hand profile and visitor 
identification code match a previously learned code for the visitor in the Internet co-location 
facility 110 security system, an access control system 160 (processing block 910) including 
a central processing unit (CPU) and a plurality of intelligent control units (not shown in this 
view) connected to the front entrance biometrics hand reader by a private security network 
105 (and also to the plurality of other biometrics hand readers 190 by the private security 
network 1 05) allows the visitor to access the Internet co-location facility 110. If there is no 
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match, access is denied. In the preferred embodiment of the present invention, a 
conventional AMAG access control system 1 60 is used, but other types of access control 
systems may be used as well. 

[0029] The access control system 160 is connected by the private security network 105 to 
the ESS 170 (processing block 91 5). Under the direction of executing software programs, 
the ESS 170 receives information regarding the use of the front entrance biometrics hand 
reader from the access control system 160. This information may include the visitor 
identification code, the date and time the visitor used the front entrance biometrics reader, 
the visitor's picture, and the visitor's name. The ESS 170 combines the information 
received from the access control system 160 with the case assignment information 
received from the CRM 120 and transmits this information to a browser-based (i.e. 
web-based) interface connected by the private security network 105 to a lobby workstation 
180 (processing block 920). In this manner, a security officer monitoring the lobby 
workstation 180 may identify which case the visitor is assigned to and authorize visitor 
access to the rest of the Intemet co-location facility 110. The ESS 170 will track the visitor 
and update the case assignment as the visitor uses the plurality of biometrics hand readers 
190 throughout the Internet co-location facility 110. 

[0030] Referring now to Figure 2, there is shown a functional block diagram illustrating the 
network detail of the access and enrollment components of the Internet co-location facility 
security system 200 in accordance with one embodiment of the present invention. 
According to this aspect of the present invention, a first time visitor to the Internet 
co-location facility 210 may be enrolled in the Internet co-location facility security system 
200 by the software 220 that controls the biometrics hand readers 215. See also Figure 
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9A. In operation, the visitor's liand may be placed in a measuring platen in an enrollment 
biometrics hand reader (processing block 925) located In the security room 255 of the 
Internet co-iocation facility 21 0. An image of the hand may oe recorded using an electronic 
imaging device and stored on a memory chip or storage device in the enrollment biometrics 
hand reader. Comparison means function to match the stored hand features with the 
visitor Identification code which may be entered into the enrollment biometrics hand reader 
through the key pad or similar type of alphanumeric input device coupled to the enrollment 
biometrics hand reader. A cable 225 transmits this information to the plurality of biometrics 
hand readers 215 located in the Internet co-location facility 210 (processing block 930). 
The plurality of biometrics hand readers 215 may also be connected by the cable 225 to a 
polling station component 260 of the access control system (processing block 940). The 
polling station 260 transmits activity to a server 270 which permits or denies access to 
designated areas in the Internet co-location facility 210 based on information received from 
the plurality of biometrics hand readers 215. 

[0031] The visitor may also be enrolled on the access control system. Visitor enrollment 
information may be entered on a computer terminal component 250 of the access control 
system (processing block 935). This information may include the visitor identification code, 
the visitor's name, co-located member access authorization levels, and the like. A CPU 
contains the software to control the access control system and is connected to the 
computer terminal component 250 of the access control system by the private security 
network 265. A badge making system 230 may also be connected to the access control 
system by the private security network 265 and makes a badge for the visitor containing the 
visitor's identification information and access authorization levels transmitted by the access 
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control system to the plurality of biometrics hand readers 215 by the private security 
network 265. The computer terminal component 250 of the access control system prints 
out a badge for the visitor based on intormation received from The badge making system 
230 through the private security network 265. The badge making system may also contain 
a camera system 235 to take a picture of the visitor to store in the badge making system 
230 for future use. It should be noted that a second camera system 280 connected to 
server 270 by connection 275 monitors activity throughout the Internet co-location facility 
210. However, second camera system 280 is not actually a part of the Internet co-location 
facility 210 enrollment procedure. 

[0032] In the embodiment of the present invention represented by Figure 2, the server 
270 also contains the software to control the ESS (processing block 950). The visitor's 
hand profile from the enrollment biometrics hand reader and the enrollment information 
from the access control system is downloaded to the ESS. The ESS transmits this 
information through the WAN 285 to the CRM 290. The WAN 285 may allow the CRM 290 
to transmit the information from the ESS to one or more CRM's and access control systems 
and to a plurality of biometrics hand readers in one or more other Internet co-location 
facilities (shown in this view). In this manner, the visitor need only enroll once in the 
Internet co-location facility security system 200 (or in another initial visit Internet co-location 
facility security system) to be granted access to any other Internet co-location facility 
throughout the world. 

[0033] Moreover, once the visitor is enrolled in the Internet co-location facility security 
system 200, the ESS may combine visitor information received from the access control 
system through the private security network 265 with case assignment information received 
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from the CRM 290 through the WAN 285 and transmit the combined information to a 
browser-based interface connected by the private security network 265 to a lobby 
workstation 240. As is discussed in the description of Figure 1 , in ihis manner a securiiy 
officer monitoring the lobby workstation 240 may identify which case a visitor is assigned to 
and authorize the visitor with access to the rest of the Internet co-location facility 21 0. 
[0034] Referring now to Figure 3, there is shown a functional block diagram illustrating the 
primary access points in the Internet co-location facility security system 300 in accordance 
with one embodiment of the present invention. Once the visitor is granted access to the 
Internet co-location facility 310 and, if necessary, enrolled in the Internet co-location facility 
310 security system, the security officer may activate a user interface function by, for 
example, selecting a button appearing on the lobby workstation (not shown in this view) 
that says "Start Visit." At this point, the visitor may use a second biometrics hand reader 
320 and enter the visitor identification code into the key pad or similar type of alphanumeric 
input device coupled to the second biometrics hand reader 320. If the second biometrics 
hand reader 320 verifies that the visitor's hand profile matches the visitor identification 
code, the access control system (not shown in this view) permits the visitor to enter the 
tunnel 325 area of the Internet co-location facility 310. If the second biometrics hand 
reader 320 does not find a match for the visitor's hand profile and the visitor identification 
code, an alarm may be set off in the Internet co-location facility 310 and remedial action will 
be taken. 

[0035] If there is a match, the visitor may use the third, fourth, and fifth biometrics hand 
readers 330, 340, and 350, respectively, located at designated access points in the Internet 
co-location facility 310. A match on these biometrics hand readers allows the visitor to 
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enter the customer area 345, the co-location area 355, and the cage 350 where the visitor 
is scheduled to make a visit to one or more cabinets 370, 380, 390, etc. It should be noted, 
however, that although the visitor uses a total of five biometrics nana readers (four 
biometrics hand readers 320, 330, 340, and 350 located in the facility and a front entrance 
biometrics hand reader 305 ) in the embodiment of the present invention represented by 
Figure 3, any number of biometrics hand readers may be used in the Internet co-location 
facility 310 security system. 

[0036] As the visitor uses the plurality of biometrics hand readers 320, 330, 340, and 350, 
the access control system (not shown in this view) tracks the visitor's progress throughout 
the Internet co-location facility 310, storing the visitor identification code, the visit 
identification number, and the date and time the visitor used any one of the plurality of 
biometrics hand readers 320, 330, 340, and 350. In addition, the ESS (not shown in this 
view) may download the tracking information stored in the access control system and 
transmit this information through the WAN to the CRM (not shown in this view). The CRM 
may make this information available through the Internet in almost real-time to co-located 
members using the CCS web-based interface (not shown in this view), in this manner, 
co-located members may monitor the location of the visitor in the Internet co-location facility 
310 at any given point in time. 

[0037] Referring now to Figure 3A, there is shown a functional block diagram illustrating 
multiple security rings representing the primary access points in the design layout of the 
Internet co-location facility of Figure 3. The Internet co-location facility 300 is essentially 
divided into what may be considered a series of five security rings (i.e., the access points 
which represent progressively more secure areas of the facility). The first security ring 352 
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is comprised of a buffer zone which surrounds the perimeter of the exterior of the Internet 
co-location facility 300 and functions as an actual physical barrier between the Internet 
co-locatiori facility 300 and a parking iot (not snown in inis view) of the faciliiy. This first 
security ring 352 may be comprised of bollards, burms (e.g., landscaping such as ivy, trees, 
dirt, etc.) or any other type of structure or landscaping that could protect the Internet 
co-location facility 300 from terrorist attack (such as a vehicle intentionally crashing into the 
structure) or accidental impact. The second security ring 354 comprises the exterior walls 
of the Internet co-location facility 300. The exterior walls may be fabricated from bullet- 
resistant, reinforced cement. In the embodiment illustrated by Figure 3, the walls are 
6-10" thick, although this thickness may vary. The third security ring 356 is the tunnel 325 
area of the Internet co-location facility 300. The doors 320 and 330 to the tunnel 325 area 
are sequenced, so that the first door 320 must close completely before an individual may 
pass through the second door 330. The fourth security ring 358 represents the door 340 
from the customer area 345 to the co-location 355 area. 

[0038] Finally, the fifth security ring 362 includes a door to an electrical and mechanical 
equipment area (not shown in this view) of the internet co-iocation facility 300. This 
equipment supports the entire Internet co-iocation facility 300. A proximity reader allows 
only authorized personnel (which typically does not include co-located members) to enter 
this area of the Internet co-location facility 300. The fifth security ring 362 also includes the 
doors 350 and 351 , etc., to the individual cages 370, 380, and 390. Upon proper use of the 
biometrics readers, co-located members may gain access to the cages 370, 380, and 390 
in the manner described herein. 
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[0039] Referring now to Figure 4, there is shown a sample Visit-in-Progress computer 
user interface screen 400 that co-located members may view from the CCS web-based 
interface in accordance with one ernucdiment of the present invention. 1 he- information 
appears in columns 420 and 430 on the screen 410. The visit identification number 440, 
the visitor's first name 450, and the date and time 460 the visitor entered a particular 
designated area in the Internet co-location facility appears in the left hand column 420, and 
the visitor's last name 470 and the visitor identification code 480 appears in the right hand 
column 430. This information is updated in almost real-time whenever the visitor uses one 
of the plurality of biometrics hand readers located in the Internet co-location facility. 
[0040] Referring now to Figure 5, there is shown a sample Case Assignment computer 
user interface screen 500 as it appears on the Internet co-location facility lobby workstation 
in accordance with one embodiment of the present invention. The visitor identification 
code, the visitor's name, the company (co-located member), and the access authorization 
level appears in columns at the top of the screen. The visit identification number, the 
company (co-located member), the reason for the visit, the name of the person who 
scheduled the visit, and the date and time of the visit appear in columns below the visitor 
information. The visitor may indicate to a security officer monitoring the lobby workstation 
the visit identification number assigned to the visitor for a particular case. 
[0041] Referring now to Figure 6, there is shown a sample Visit-in-Progress computer 
screen 600 that is maintained in a database of an Internet co-location facility security 
system in accordance with one embodiment of the present invention. The visitor 
identification code 610, the visit identification number 620, the visitor's first name 630, 
middle initial 640, and last name 650, and the company 660 (co-located member) appear in 
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columns on the screen. As is illustrated by the Visit-in-Progress screen 600, more than one 
visitor may be assigned to a particular case. In addition, the Visit-in-Progress screen 600 
demonstrates inai ihe system matches the visitor identirication code 610 with the visit 
identification number 620. 

[0042] Referring now to Figure 7, there is shown a sample Start Visit computer user 
interface screen 700 as it appears on the lobby workstation in accordance with one 
embodiment of the present invention. A security officer monitoring the lobby worl<station 
may click on a "Start Visit" box 71 0 on the screen with a mouse or some other type of 
control device to authorize the visitor to access the remainder of the Internet co-location 
facility. The visitor may then use the plurality of biometrics hand readers to access 
designated areas within the Internet co-location facility. When the visitor completes the 
scheduled visit and returns to the lobby, a screen with an "End Visit" box (not shown in this 
view) will appear on the lobby workstation. The security officer may click on the "End Visit" 
box to end the visit. It should be noted, however, that if more than one visitor is assigned 
for the scheduled visit, a case assignment will remain open and still appear on the lobby 
workstation as a visit-in-progress for one or more other visitors assigned to the case. 
[0043] Thus, a multi-ringed Internet co-location facility security system and method has 
been described. Although the foregoing description and accompanying figures discuss and 
illustrate specific embodiments, it should be appreciated that the present invention is to be 
measured only in terms of the claims that follow. 
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